Obama says North Korea hacked Sony, vows response

A movie billboard is displayed behind a Sony Pictures Entertainment Studio entrance in Culver City, Calif., Thursday, Dec. 18, 2014. Companies across the globe are on high alert to tighten up network security to avoid being the next company brought to its knees by hackers like those that executed the dramatic cyberattack against Sony Pictures Entertainment.

WASHINGTON — President Barack Obama declared Friday that Sony "made a mistake" in shelving a satirical film about a plot to assassinate North Korea's leader, and he pledged the U.S. would respond "in a place and manner and time that we choose" to the hacking attack on Sony that led to the withdrawal. The FBI blamed the hack on the communist government.

Speaking of executives at Sony Pictures Entertainment, Obama said at a year-end news conference, "I wish they had spoken to me first. ... We cannot have a society in which some dictator someplace can start imposing censorship."

Obama said he imagined situations in which dictators "start seeing a documentary that they don't like or news reports that they don't like."

Sony said it had had no choice but to cancel distribution of the movie since theaters were refusing to show it. North Korea denied anew that it had hacked the studio.

"There is not any connection," U.N. diplomat Kim Song told The Associated Press. Song criticized the film but disputed his government hacked Sony and orchestrated the movie's shutdown: "It defamed the image of our country. It made a mockery of our sovereignty. We reject it. But there is no relation" to the hacking.

The U.S. decision to openly blame North Korea — which involved agreement by the State Department and intelligence agencies — escalated a global game of brinkmanship. It happened after the disclosure of confidential Sony emails and business files and threats of terror attacks against U.S. movie theaters until Sony agreed to cancel the Christmas Day release of its comedy, "The Interview."

Obama spoke not long after the FBI provided the most detailed accounting to date of the digital break-in. The president's pointed criticism of Sony shifted focus to whether the studio would modify its decision, as some leading celebrities — including actors George Clooney and Sean Penn — have recommended.

"Sony is a corporation. It suffered significant damage. There were threats against its employees. I am sympathetic to the concerns that they faced," Obama said. "Having said all that, yes, I think they made a mistake."

Sony Pictures chief executive Michael Lynton said it was the president who was mistaken, noting that Sony canceled the release only after all major theater chains decided not to show the movie. But the Homeland Security Department concluded those threats were not credible, and the top multiplex chains in North America dropped "The Interview" only after Sony informed them it would not protest if the theaters pulled the film. Representatives for Regal, AMC, and Carmike did not immediately respond to request for comment Friday.

"The president, the press and the public are mistaken as to what actually happened," Lynton told CNN. "We do not own movie theaters. We cannot determine whether or not a movie will be played in movie theaters."

Lynton did not indicate whether Sony planned to release the movie on DVD or through video-on-demand services, which are not controlled by theaters, but the company suggested that was an option in a statement late Friday.

"The only decision that we have made with respect to release of the film was not to release it on Christmas Day in theaters, after the theater owners declined to show it," the company said. "After that decision, we immediately began actively surveying alternatives to enable us to release the movie on a different platform."

Lynton said to CNN that though YouTube distribution is "one thing that we will consider," no major video-on-demand or e-commerce site has stepped forward to offer to distribute the film. A DVD release falls into the same category.

"If we can't find one of those large retailers, or many of those large retailers to sell our DVDs, we wouldn't be able to provide them with 'The Interview'," said Lynton.

As for the case against North Korea, the U.S. detected communications between computer Internet addresses known to be operated by North Korea and hacking tools left behind at the crime scene, which the FBI said contained subtle clues linking them to that country's government.

The U.S. said in a statement: "North Korea's actions were intended to inflict significant harm on a U.S. business and suppress the right of American citizens to express themselves." The statement included a general promise to impose "costs and consequences" on any person, group or government using cyberattacks to threaten the U.S. or its interests.

Obama wasn't any more specific.

"They caused a lot of damage, and we will respond," he said. "We will respond proportionally, and we'll respond in a place and time and manner that we choose. It's not something that I will announce here today at a press conference."

In a taunting new email, the hackers told Sony that executives were "very wise" to cancel the movie's release and warned the studio never to release the film "in any form."

In Hollywood, Clooney said the entertainment industry should push for immediate release of "The Interview" online. In an interview with the trade site Deadline, he urged Sony to "do whatever you can to get this movie out. Not because everybody has to see the movie, but because I'm not going to be told we can't see the movie. That's the most important part."

Penn said: "By caving to the outside threat, we make our nightmares real. The decision to pull 'The Interview' is historic. It's a case of putting short-term interests ahead of the long term."

The evidence implicating North Korea was previously described as largely circumstantial, including unspecified clues in the hacking tools left behind and the involvement of at least one computer in Bolivia traced to earlier attacks blamed on North Korea. Now, the FBI said, those clues included similarities to other tools developed by North Korea in specific lines of computer code, encryption algorithms and data deletion methods. More significantly, the FBI discovered that computer Internet addresses known to be operated by North Korea were communicating directly with other computers used to deploy and control the hacking tools and collect the stolen Sony files.

The FBI noted in its statement that it worked closely on the investigation with "other U.S. government departments and agencies." Those included the National Security Agency, a person familiar with the case said, speaking only on condition of anonymity because some information NSA was providing in the case was highly classified.

An internal FBI investigative document obtained by The Associated Press identified the computers in the Sony hacking as operating in New York, Thailand, Poland, Italy, Bolivia, Singapore and Cyprus. At least three were still functioning Friday, responding online to Internet test signals transmitted by the AP. The hackers previously published some of the stolen materials with a message that included five addresses using an anonymous email service in France.

U.S. options for acting against North Korea are limited. The U.S. already has severe trade sanctions in place, and there is no appetite for military action. Even if investigators could identify and prosecute the individual hackers believed responsible, there's no guarantee that any located are overseas would ever see a U.S. courtroom. Hacking back at North Korean targets by U.S. government experts could encourage further attacks against American targets.

"I think the administration is going to look for other ways that we can press financial pain on the leadership of the regime and its cronies," said Rep. Adam Schiff, D-Calif., a member of the House intelligence committee whose congressional district includes major movie studios.

Associated Press Writers Jake Coyle in New York and Cara Anna at the United Nations contributed to this report.